Performing JavaScript Static Analysis by Lewis Ardern

preview_player
Показать описание
Abstract:

Performing JavaScript Static Analysis!

JavaScript is everywhere, in our browsers, on our servers, and even runs our databases. Blackbox testing is all well and good, but to be able to understand issues, you need to look under the hood and look at the code. This talk will give a high-level overview on how to perform static analysis against JavaScript in a manual and automated fashion, with the emphasis on:

• Common review methods
• Common security issues
• Strongly typed JavaScript and Transpiling
• Tools and Linters
• Customizing Tools and Linters

Bio:

Рекомендации по теме
Комментарии
Автор

09:03 covered today 10:03 dynamic execution of javascript, eval, setTimeout, DOMXSS 14:24 SOP, postMessage 23:28 Static Analysis, AST 43:17 ESLint

domaincontroller
welcome to shbcf.ru